📦 Fortiportal

CVE-2025-24470 is an Improper Resolution of Path Equivalence vulnerability in FortiPortal that allows remote unauthenticated attackers to retrieve source code via crafted HTTP requests. This affects F...

A use-after-free vulnerability in FortiManager and FortiAnalyzer's fgfmsd daemon allows remote unauthenticated attackers to execute arbitrary code as root by sending specially crafted requests to the ...

This vulnerability allows authenticated administrators on affected Fortinet devices to retrieve certificate private keys via the admin shell. This affects FortiAnalyzer, FortiManager, FortiOS, and For...

An incorrect authorization vulnerability in FortiPortal versions 7.4.0 through 7.4.5 allows authenticated attackers to reboot shared FortiGate devices via crafted HTTP requests. This affects organizat...

This vulnerability allows man-in-the-middle attackers to intercept and tamper with encrypted communications between FortiPortal and FortiManager/FortiAnalyzer/SMTP servers due to improper certificate ...

This SQL injection vulnerability in Fortinet FortiPortal allows authenticated attackers to view server-side SQL queries by submitting specially crafted HTTP requests. It affects FortiPortal versions 7...

This vulnerability allows unauthenticated attackers to execute arbitrary code or commands on affected Fortinet devices by sending specially crafted packets. It affects multiple Fortinet products inclu...

This SQL injection vulnerability in Fortinet FortiPortal allows privileged users to execute unauthorized SQL commands through the report download functionality, potentially accessing sensitive informa...